Mazda Confirms Data Breach Exposing Employee and Business Partner Information Mazda Motor Corporation, one of Japan’s largest automakers with an annual production of 1.2 million vehicles and nearly $24 billion in revenue, disclosed a security incident involving unauthorized access to a warehouse management system. The breach, detected in December, exposed 692 records containing sensitive data belonging to employees and business partners. The attackers exploited a vulnerability in a system used for parts procurement from Thailand, which did not store customer information. According to Mazda’s statement, the compromised data included user IDs, full names, email addresses, company names, and business partner IDs. While no misuse of the exposed information has been confirmed, the company acknowledged the heightened risk of phishing and scams targeting affected individuals. In response, Mazda reported the incident to Japan’s Personal Information Protection Commission and engaged an external cybersecurity firm to investigate. The company also implemented enhanced security measures, including reduced internet exposure, security patches, increased monitoring, and stricter access controls. No ransomware group has publicly claimed responsibility for the attack. However, in November 2025, the Clop ransomware group listed Mazda.com and MazdaUSA.com on its leak site, alleging compromise of both the Japanese automaker and its U.S. subsidiary though Mazda has not officially confirmed a data breach. Further details remain pending as the investigation continues.